extend navigation api to support root and (single) group level
add highlighting and auth checks to navigation